Gary, How 'bout giving us a simple toggle to disable display of individual flags? You can still do all the background processing, just let us turn off the flags that don't work for us. A simple one-page form with each flag's icon, it's description, and a checkbox. This would also be a great place to link drill-down help text of the rationale behind each flag (which you could do later- just get us the knobs first ;)
-mel via cell On Jun 12, 2010, at 9:42 AM, "Gary Gatten" <[email protected]<mailto:[email protected]>> wrote: Well, they're "correct" in some environments. Problem is the thresholds aren't easily tuned. Some, such as "host contacts" would be great if it was based on some sliding time window (last 60 mins or something?), but it starts counting as soon as ntop initializes so eventually all hosts will trip the "host contacts" threshold. So yeah, they need some work to be really useful, but it was a good idea! ________________________________ From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> To: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Sent: Sat Jun 12 10:31:12 2010 Subject: Re: [Ntop] Warning flags? Whats the point with them, since they obviously aren’t correct anyway. With Best regards Tomas Larsson Sweden www.ebaman.com<http://www.ebaman.com> Från: [email protected]<mailto:[email protected]> [mailto:[email protected]] För Gary Gatten Skickat: den 12 juni 2010 16:23 Till: '[email protected]<mailto:'[email protected]>' Ämne: Re: [Ntop] Warning flags? Somethings can be tweaked, and maybe disabled in "globals-defines.h", which will require a recompile. Others I think are deeper in the source. To my knowledge there is no "easy" way to get rid of / tune these, but check the man, FAQ, and online (embedded) doc to be sure. ________________________________ From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> To: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Sent: Sat Jun 12 08:10:37 2010 Subject: [Ntop] Warning flags? How do I disable all these ”error” flags that reports errors when there aren’t any. I.E • <image001.gif>Wrong network mask or bridging enabled • <image001.gif>Suspicious activities: too many host contacts With Best regards Tomas Larsson Sweden www.ebaman.com<http://www.ebaman.com> Från: [email protected]<mailto:[email protected]> [mailto:[email protected]] För Tomas Larsson Skickat: den 12 juni 2010 12:33 Till: <mailto:[email protected]> [email protected]<mailto:[email protected]> Ämne: Re: [Ntop] Possible errors in the latest release. Compiled and up and running, since half an hour or so. One thing I’ve noticed, it only sees half of the hosts on the local network Furthermore, my CENTOS 5.3(5) router/GW is identified as Win95 My CENTOS 5.3 server is identified as linux 2.4 With Best regards Tomas Larsson Sweden www.ebaman.com<http://www.ebaman.com> Från: [email protected]<mailto:[email protected]> [mailto:[email protected]] För Tomas Larsson Skickat: den 10 juni 2010 12:48 Till: <mailto:[email protected]> [email protected]<mailto:[email protected]> Ämne: Re: [Ntop] Possible errors in the latest release. Thanks, will do over the weekend. For now, I’ve deleted everything in the data-dir (/var/ntop) except the ntop–pw.db file, restarted, and it seems to work, at least for now. My guess is that ntop screwed up something and couldn’t recover from it. With Best regards Tomas Larsson Sweden www.ebaman.com<http://www.ebaman.com> Från: [email protected]<mailto:[email protected]> [mailto:[email protected]] För Luca Deri Skickat: den 10 juni 2010 10:21 Till: <mailto:[email protected]> [email protected]<mailto:[email protected]> Ämne: Re: [Ntop] Possible errors in the latest release. Tomas I have put in SVN a fix for the problem you reported. Please resync, delete your prefs and let me know Cheers Luca On 06/09/2010 02:01 PM, Tomas Larsson wrote: Mon Jun 7 21:18:13 2010 [rrdPlugin.c:2810] **WARNING** RRD: rrd_update(/var/ntop/rrd/interfaces/eth0/IP_DNSFlows.rrd) error: Unable to connect to rrdcached: failed to resolve address `(null)' (port 42217): Name or service not known Mon Jun 7 21:18:13 2010 [rrdPlugin.c:2810] **WARNING** RRD: rrd_update(/var/ntop/rrd/interfaces/eth1/throughput.rrd) error: Unable to connect to rrdcached: failed to resolve address `(null)' (port 42217): Name or service not known make sure that you have configured the rrd plugin NOT to use rrdcached daemon Regards Luca How do I do that can't find any info, would that configuration change by itself? Regards Tomas _______________________________________________ Ntop mailing list <mailto:[email protected]>[email protected]<mailto:[email protected]> <http://listgateway.unipi.it/mailman/listinfo/ntop>http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
